Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          YQpsJnGlAPtbEYfA9l+u71QDrgIx9usrzQLxMN9LfZg=
Subject key identifier:   DB:47:C9:FD:4D:94:80:C9:D3:1B:5F:5C:C4:C1:7C:DD:A6:76:1E:D4
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       019E924ADC74C7CD1506A148C67C6890D5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          194D
Signing time:             Thu 04 Jun 2026 11:00:40 +0000
Manifest this update:     Thu 04 Jun 2026 11:00:40 +0000
Manifest next update:     Fri 05 Jun 2026 11:00:40 +0000
Files and hashes:         1: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (hash: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0=)
                          2: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=)
                          3: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
                          4: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: D9S92y+RmbkZgO8366YFmHkUEjqrhuc1ZiyUDCg1C3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:4a:dc:74:c7:cd:15:06:a1:48:c6:7c:68:90:d5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: Jun  4 11:00:40 2026 GMT
            Not After : Jun  5 11:00:40 2026 GMT
        Subject: CN=db47c9fd4d9480c9d31b5f5cc4c17cdda6761ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:f2:1b:e2:e0:6c:54:c2:93:49:b2:9c:06:
                    66:bd:d8:3b:73:69:69:43:14:f5:a8:86:89:67:57:
                    cf:60:52:65:dc:a7:4f:71:9b:91:23:a3:ca:9f:a5:
                    c8:71:b1:12:b3:e7:3f:01:38:fe:48:ce:9b:87:f0:
                    cb:34:f5:fb:3e:69:75:72:9b:05:46:35:9b:b3:c1:
                    5c:53:18:22:70:90:3d:18:e6:06:5e:74:a6:0f:5c:
                    9e:4a:eb:df:c7:b1:6c:a2:ac:c0:b5:cb:5f:06:34:
                    95:e2:47:63:da:39:d7:f3:03:5f:f8:42:32:d6:25:
                    42:6b:3b:41:6d:e7:d2:2c:f4:8a:95:ef:59:a5:3a:
                    c5:14:77:5b:71:3b:0d:0e:95:3e:c9:94:6a:cd:5f:
                    a7:49:25:8d:44:c5:32:5a:93:03:07:ac:ae:99:75:
                    3d:31:a1:46:c7:fa:63:ea:db:75:0b:9d:a5:ab:35:
                    61:c2:9c:32:56:6a:bc:7b:ea:93:16:21:f2:76:87:
                    24:f8:c1:77:02:49:0d:05:cc:59:1a:b5:21:e7:91:
                    3f:d2:e4:9c:ee:45:18:59:95:65:22:d2:32:a2:f8:
                    6d:ca:b4:6a:2c:f3:4d:ab:cb:15:31:0a:27:f5:55:
                    26:e7:ff:5d:f8:b3:29:14:e2:a9:3c:90:e2:df:2e:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:47:C9:FD:4D:94:80:C9:D3:1B:5F:5C:C4:C1:7C:DD:A6:76:1E:D4
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:15:b2:8f:d6:5f:8d:a6:f8:18:65:32:ba:e4:43:15:f8:
         47:24:2b:f8:5d:80:bb:67:e4:94:ba:d9:84:4b:a5:49:9a:23:
         60:aa:ba:66:01:1e:7f:b2:b7:4d:08:16:7a:64:1d:78:13:01:
         d4:78:f1:b0:47:e9:43:e4:a0:34:91:c4:f3:40:1f:b0:36:ca:
         f3:4d:aa:01:6d:0e:a0:9b:b3:d4:72:c6:76:d8:3a:1b:73:11:
         12:c6:53:a8:dc:05:ee:dc:83:60:d7:c1:0f:34:e7:91:f3:45:
         a3:b2:a4:96:52:0d:6b:8a:9b:ed:91:53:c6:62:e3:d4:3a:d1:
         00:85:de:11:70:c7:e9:1f:92:62:75:27:cc:3e:16:7b:43:eb:
         e3:b6:0d:71:c0:1c:49:a9:d7:51:21:2f:ff:75:5e:a2:30:80:
         ef:ce:96:51:4a:70:99:05:cf:f3:21:e0:d1:92:ec:93:96:cc:
         b2:ac:76:10:4d:91:7c:b6:75:02:79:6f:43:53:e7:df:5b:cc:
         18:ba:90:0f:fc:fd:70:1a:89:b8:b6:f9:c2:1c:8c:1b:ba:a7:
         82:14:46:5d:06:7f:92:e6:f4:be:d3:87:19:1d:d9:1d:b0:22:
         c5:4f:0b:7a:3c:42:56:ff:ef:93:af:9b:e1:88:26:41:bc:af:
         24:c8:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:21:03 2026 by rpki-client